CVE-2025-34130

HIGH EXPLOITED

LILIN DVR <2.0b60_20200207 - Info Disclosure

Title source: llm
STIX 2.1

Exploitation Summary

CVE-2025-34130 has been observed exploited in the wild (reported by VulnCheck KEV).

Description

An unauthenticated arbitrary file read exists in LILIN Digital Video Recorder (DVR) devices prior to firmware version 2.0b60_20200207 via the /z/zbin/net_html.cgi endpoint. This vulnerability allows attackers to read sensitive configuration files, such as /zconf/service.xml, which can then be used to facilitate further attacks including command injection. The vulnerability has been exploited in the wild in conjunction with other issues by botnets like FBot and Moobot.

References (3)

Core 3
Core References
Various Sources third-party-advisory technical-description
https://blog.netlab.360.com/multiple-botnets-are-spreading-using-lilin-dvr-0-day/

Scores

CVSS v4 8.7
EPSS 0.0115
EPSS Percentile 62.7%
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact partial

Details

VulnCheck KEV 2020-03-20
CWE
CWE-200 CWE-306
Status published
Products (1)
Merit LILIN/DVR Firmware < 2.0b60_20200207
Published Jul 16, 2025
Tracked Since Feb 18, 2026